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1 Survey and benchmark of block ciphers for wireless sensor networks 
Yee Wei Law, Jeroen Dounnen, Pieter Hartel 

February 2006 ACM Transactions on Sensor Networks (TOSN), voiunne 2 issue i 
Publisher: ACM Press 

Additional Infornnation: full citation, appendices and supplements . 

abstract , references , index terms 



Full text available: 



Cryptographic algorithms play an important role in the security architecture of wireless 
sensor networks (WSNs). Choosing the most storage- and energy-efficient block cipher is 
essential, due to the facts that these networks are meant to operate without human 
intervention for a long period of time with little energy supply, and that available storage 
is scarce on these sensor nodes. However, to our knowledge, no systematic work has 
been done In this area so fan We construct an evaluation framew ... 

Keywords: Sensor networks, block ciphers, cryptography, energy efficiency 

Hig h speed networking security: design and implementation of two new DPP-based Q 
ci phers 

N. Sklavos, N. A. Moldovyan, O. Koufopavlou 

February 2005 Mobile Networks and Applications, volume lo issue i-i 
Publisher: Kluwer Academic Publishers 

Additional Information: full citation , abstract , references , index terms . 
review 



Full text available: g pdf (643. 16 KB) 



Using Data-Dependent (DD) Permutations (DDR) as main cryptographic primitive two new 
ciphers are presented: ten-round Cobra-H64, and twelve-round Cobra-H128. The 
designed ciphers operate efficiently with different plaintext lengths, 64 and 128-blt, for 
Cobra-H64 and Cobra-H128, respectively. Both of them use very simple key scheduling 
that defines high performance, especially in the case of frequent key refreshing. A novel 
feature of Cobra-H64 and Cobra-H128 Is the use of the Switchable Operatic ... 

Keywords: Cobra-H128, Cobra-H64, data-dependent permutations, encryption, 
networking security 



Com puter security ( SEC): Efficient Diffie-Hellmann two-party key agreement 
protocols ba se d o n elliptic curv es 
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Mauhzio Adriano Strangio 

March 2005 Proceedings of the 2005 ACM symposium on Applied computing SAC *05 
Publisher: ACM Press 

Full text available: ^ pdf(234.27 KB) Additional Information: full citation, abstract , references , index terms 

Key agreement protocols are of fundamental importance for ensuring the confidentiality of 
communications between two (or more) parties over an insecure network. In this paper 
we review existing two-party protocols whose security rests upon the intractability of 
Diffie-Hellmann and Discrete Logarithm problems over elliptic curve groups. In addition, 
we propose a new two-party mutual authenticated key agreement protocol and 
collectively evaluate the security and performance of all the schemes cons ... 

Keywords: cryptography, elliptic curves, key agreement, protocols 

The design of substitution-permutation networks resistant to differential and linear Q 

cry ptanalysis 

H. M. Heys, S. E. Tavares 

November 1994 Proceedings of the 2nd ACM Conference on Computer and 
communications security CCS '94 

Publisher: ACM Press 

Full text available: ^ pdf(748.62 KB) Additional Information: full citation , abstract , references , index terms 

In this paper we examine a class of product ciphers referred to as substitution- 
permutation networks. We Investigate the resistance of these cryptographic networks to 
two important attacks: differential cryptanalysis and linear cryptanalysis. In particular, we 
develop upper bounds on the differential characteristic probability and on the probability 
of a linear approximation as a function of the number of rounds of substitutions. Further, 
it is shown that using large S-boxes with good diffu ... 

Ganzua: A cryptanalysis tool for monoalphabetic and polyalphabetic ciphers Q 
Jesus Adolfo Garcfa-Pasquei, Jose Galaviz 

September 2006 Journal on Educational Resources in Computing (JERIC), volume 6 issue 

3 

Publisher: ACM Press 

Full text available: ^ pdf(4.18 MB) Additional Information: full citation , abstract , references , index terms 

Many Introductory courses to cryptology and computer security start with or include a 
discussion of classical ciphers that usually contemplates some cryptanalysis techniques 
used to break them. Ganzua (picklock in Spanish) Is an application designed to assist the 
cryptanalysis of ciphertext obtained with monoalphabetic or polyalphabetic ciphers. It can 
use almost arbitrary character sets for the plain and cipher alphabets as well as obtain the 
standard relative frequencies of many lang ... 

Keywords: Cryptology, classical cryptography 



6 An experiment on PES statistical cryptanalysis Q 
Serge Vaudenay 

January 1996 Proceedings of the 3rd ACM conference on Computer and 
communications security CCS '96 

Publisher: ACM Press 

Full text available: ^ pdf (786.82 KB) Additional Information: full citation , references , citinos . index terms 




^ An introduction to side channel cryptanalysis of RSA 
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Artemios G. Voyiatzis 

May 2005 Crossroads, volume ii issue 3 

Publisher: ACM Press 

Full text available: g] html(18.63 KB) Additional Information: full citation , references , index terms 



8 Differential cryptanalysis of hash functions based on block ciphers 
Bart Preneel, Rene Govaerts, Joos Vandewalle 

December 1993 Proceedings of the 1st ACM conference on Computer and 
communications security CCS '93 

Publisher: ACM Press 

Full text available: ^ pdf(609.16 KB) Additional Infomiation: full citation , abstract , references , index terms 

This paper describes a differential attack on several hash functions based on a block 
cipher. The ennphasis will be on the results for cases where DES [8] is the underlying 
block cipher. It will briefly discuss the case of FEAL-N [19, 21]. 

9 Cr yptosystem and analysis: Cryptanalysis of the "Grain" family of stream ciphers I I 

Alexander Maximov 

March 2006 Proceedings of the 2006 ACM Symposium on Information, computer and 
communications security ASIACCS '06 

Publisher: ACM Press 

Full text available: ^ pdf(234.26 KB) Additional Information: full citation , abstract , references , index terms 

Let us have an NLFSR with the feedback function g(x) and an LFSR with the generating 
polynomial f(x). The function g(x) Is a Boolean function on the state of the NLFSR and the 
LFSR, at any time instance t Whenever the LFSR has good statistical properties, it is used 
for controlling the randomness of the NLFSR's state machine. In this paper we define and 
study the general class of "Grain" family of stream ciphers, where the keystream bits are 
generated by another Bool ... 

Keywords: correlation attacks, cryptanalysis, decoding problem, distinguisher, grain 
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10 Cryptanalysis of some encryption/cipher schemes using related key attack I I 

NOTE FROM ACIW: It has been determined that the authors of this article 
plag iarized the contents from a previousl y published paper. Therefore ACM has 
shut off access to this p aper, 

Khawaja Amer Hayat, Umar Waqar Anis, S. Tauseef-ur-Rehman 

June 2004 ACM SIGCSE Bulletin , Working group reports from ITiCSE on Innovation 
and technology in computer science education ITiCSE-WGR '04, volume 36 
Issue 4 
Publisher: ACM Press 

Additional Information: full citation , abstract, references 

NOTE FROM ACM: It has been determined that the authors of this article 
plagiarized the contents from a previously published paper. Therefore ACM has 
shut off access to this paper. 

To see the paper that was plagiarized, clicic here 

Additional Links 

The citation in ACM's Guide to Computing Literature, ^ 

Keywords: PES, cryptanalysis, differential related key attacks, related key attack 
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Cryptanalysis and protocol failures (abstract) I I 

Gustavus J. Simmons 
>^ December 1993 Proceedings of the 1st ACM conference on Computer and 
communications security CCS '93 
Publisher: ACM Press 

Full text available: ^ pdf(164.92 KB) Additional Information: full citation, abstract , index terms 

In this lecture examples will be given of key distribution protocols tinat distribute keys to 
unintended recipients, secrecy protocols that publicly reveal the contents of (supposedly) 
secret communications, digital signature protocols that make forgery easy — all based on 
cryptoalgorithms that are sound so far as is known. In at least one case the cryptographic 
algorithm that is employed is Vernam encryption/decryption with a properly chosen one 
time key which is well known to be unco ... 

12 Concurrent error detection of fault-based side-channel cryptanalysis of 128-bit I I 
^ symmetric block ciphers 

^ Ramesh Karri, Kaijie Wu, Piyush Mishra, Yongkook Kim 

June 2001 Proceedings of the 38th conference on Design automation DAC '01 

Publisher: ACIVI Press 

Full text available: ^ pdf(260.32 KB ) Additional Information: full citation , abstract , references , index terms 

Fault-based side channel cryptanalysis is very effective against symmetric and 
asymmetric encryption algorithms. Although straightforward hardware and time 
redundancy based concurrent error detection (CED) architectures can be used to thwart 
such attacks, they entail significant overhead (either area or performance). In this paper 
we Investigate systematic approaches to low-cost, low-latency CED for symmetric 
encryption algorithms based on the Inverse relationship that exists between encryp ... 

13 Book reviews: Comparative book review: Cryptography: An Introduction by V. V. I I 
^ Yaschenko (American Mathematical Society. 2002): Cryptanalysis of Number 

^ Theoretic Ciphers by S.S. Wa g staff, Jr. ( Cha pman & Hall/CRC Press. 2003) : RSA 
and Public-Key Cryptograph y by R. A. Mollin (Chapman & Hall/CRC Press. 2003) : 
Foundations of Cry ptogra phy, vol. 1: Basic Tools by O. Goldreich. (Cambridg e 

University Press. 2001) 
Jonathan Katz 

June 2005 ACM SIGACT News, volume 36 issue 2 
Publisher: ACM Press 

Full text available: pdf (2.79 MB) Additional Information: full citation , abstract , index terms 

With the growing interest in cryptography — from students and researchers as well as 
from the general public — there has been a corresponding increase in the number of 
cryptography textbooks available. Many of these, however, remain somewhat mired in the 
past, and present cryptography from a pre-1980s point of view. Indeed, there are very 
few published books which even make an attempt (let alone a successful one) at covering 
modern cryptography. This unfortunate state of af ... 

''^ Cryptanal ysis of a flexible remote user authentication scheme using smart cards Q 
^ Wei-Chi Ku, Shuai-Min Chen 

^ January 2005 ACM SIGOPS Operating Systems Review, volume 39 issue i 
Publisher: ACM Press 

Full text available: ^ , pdf(406.12 KB) Additional Information: full citation , abstract , references , index terms 

In 2002, Lee, Hwang, and Yang proposed a verifier-free remote user authentication 
scheme using smart cards. Their scheme is efficient because of mainly using 
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cryptographic hash functions. However, we find that Lee-Hwang-Yang's scheme is not 
reparable once the user's permanent secret Is compromised and is vulnerable to a 
privileged insider's attack. Furthermore, it lacks the user eviction mechanism. In this 
paper, we first show the weaknesses of Lee-Hwang-Yang's scheme, and then compare 
Lee-Hwang ... 

Keywords: authentication, password, privileged insider's attack, reparability, user 
eviction 



15 Systematic generation of cry ptogra phically robust S-boxes I I 
Jennifer Seberry, XIan-Mo Zhang, Yuliang Zheng 

December 1993 Proceedings of the 1st ACM conference on Computer and 
communications security CCS '93 

Publisher: ACM Press 

Full text available: ^ pdf(1.20 MB) Additional Information: full citation , abstract , references , index terms 

Substitution boxes (S-boxes) are a crucial component of DES-like block ciphers. This 
research addresses problems with previous approaches towards constructing S-boxes, 
and proposes a new definition for the robustness of S-boxes to differential cryptanalysis, 
which is the most powerful cryptanalytic attack known to date. A novel method based on 
group Hadamard matrices is developed to systematically generate S-boxes that satisfy a 
number of critical cryptographic properties. Among the propert ... 

16 Battery power-aware encryption Q 
R. Chandramouli, S. Bapatia, K. P. Subbalakshmi, R. N. Uma 

May 2006 ACM Transactions on Information and System Security (TISSEC), volume 9 

Issue 2 
Publisher: ACM Press 

Full text available: ^ pdf(454.71 KB ) Additional Information: full citation , abstract , references , index terms 

Minimizing power consumption is crucial in battery power-limited secure wireless mobile 
networks. In this paper, we (a) introduce a hardware/software set-up to measure the 
battery power consumption of encryption algorithms through real-life experimentation, 
(b) based on the profiled data, propose mathematical models to capture the relationships 
between power consumption and security, and (c) formulate and solve security 
maximization subject to power constraints. Numerical results are presented t ... 





Keywords: Low-power encryption, optimization, profiling 



17 Attacks and ciyptanalysis: A natural lan g uage approach to automated cryptanalysis I I 

^ of two-time pads 

^ Joshua Mason, Kathryn Watkins, Jason Eisner, Adam Stubblefield 

October 2006 Proceedings of the 13th ACM conference on Computer and 

communications security CCS '06 
Publisher: ACM Press 

Full text available: Q pdf(230.76 KB ) Additional Information: full citation , abstract , references , index terms 

While keystream reuse in stream ciphers and one-time pads has been a well known 
problem for several decades, the risk to real systems has been underappreciated. 
Previous techniques have relied on being able to accurately guess words and phrases that 
appear in one of the plaintext messages, making it far easier to claim that "an attacker 
would never be able to do that" In this paper, we show how an adversary can 
automatically recover messages encrypted under the same keystream if only the ... 



Keywords: keystream reuse, one-time pad, stream cipher 
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^8 Applied cryptography: Cryptanalysis of a provably secure CRT-RSA algorithm Q 
David Wagner 

October 2004 Proceedings of the 11th ACM conference on Computer and 

communications security CCS '04 
Publisher: ACM Press 

Full text available: ^ pdf(131.85 KB) Additional Information: full citation , abstract , references , index terms 

We study a countermeasure proposed to protect Chinese remainder ttieorem (CRT) 
computations for RSA against fault attacks. The scheme was claimed to be provably 
secure. However, we demonstrate that the proposal is in fact insecure: it can be broken 
with a simple and practical fault attack. We conclude that the proposed countermeasure is 
not safe for use in its present form. 




Keywords: RSA, Chinese remainder theorem, cryptanalysis, fault attacks 



Technical opinion: desianina cryptography for the new century 
Susan Landau 

May 2000 Communications of the ACM, volume 43 issue 5 
Publisher: ACM Press 
Full text available: g[ pdf(215.1Q KB ) 
m html(35.Q6 KB) 



Additional Information: full citation , references , index terms 



20 Cryptography and data security Q 
Dorothy Elizabeth Robling Denning 
January 1982 Book 

Publisher: Addison-Wesley Longman Publishing Co., Inc. 

Full text available* ISI Ddfd 9 47 MB) Additional Information: full citation , abstract , references , citings , index 
u e aval a e.-p|.a_t_. terms 

From the Preface (See Front Matter for full Preface) 

Electronic computers have evolved from exiguous experimental enterprises in the 1940s 
to prolific practical data processing systems in the 1980s. As we have come to rely on 
these systems to process and store data, we have also come to wonder about their ability 
to protect valuable data. 

Data security is the science and study of methods of protecting data in computer and 
communication systems from unauthorized disclosure ... 
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